don't enable already enabled syscalls